librex 0.0.68 → 0.0.70

data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb

@@ -34,63 +34,63 @@ module Railgun
 # Manages our library of windows constants
 #
 class WinConstManager
-	attr_reader :consts
+  attr_reader :consts
 
-	def initialize(initial_consts = {})
-		@consts = {}
+  def initialize(initial_consts = {})
+    @consts = {}
 
-		initial_consts.each_pair do |name, value|
-			add_const(name, value)
-		end
-	end
+    initial_consts.each_pair do |name, value|
+      add_const(name, value)
+    end
+  end
 
-	def add_const(name, value)
-		consts[name] = value
-	end
+  def add_const(name, value)
+    consts[name] = value
+  end
 
-	# parses a string constaining constants and returns an integer
-	# the string can be either "CONST" or "CONST1 | CONST2"
-	#
-	# this function will NOT throw an exception but return "nil" if it can't parse a string
-	def parse(s)
-		if s.class != String
-			return nil # it's not even a string'
-		end
-		return_value = 0
-		for one_const in s.split('|')
-			one_const = one_const.strip()
-			if not consts.has_key? one_const
-				return nil # at least one "Constant" is unknown to us
-			end
-			return_value |= consts[one_const]
-		end
-		return return_value
-	end
+  # parses a string constaining constants and returns an integer
+  # the string can be either "CONST" or "CONST1 | CONST2"
+  #
+  # this function will NOT throw an exception but return "nil" if it can't parse a string
+  def parse(s)
+    if s.class != String
+      return nil # it's not even a string'
+    end
+    return_value = 0
+    for one_const in s.split('|')
+      one_const = one_const.strip()
+      if not consts.has_key? one_const
+        return nil # at least one "Constant" is unknown to us
+      end
+      return_value |= consts[one_const]
+    end
+    return return_value
+  end
 
-	def is_parseable(s)
-		return !parse(s).nil?
-	end
+  def is_parseable(s)
+    return !parse(s).nil?
+  end
 
-	#
-	# Returns an array of constant names that have a value matching "winconst"
-	# and (optionally) a name that matches "filter_regex"
-	# 
-	def select_const_names(winconst, filter_regex=nil)
-		matches = []
+  #
+  # Returns an array of constant names that have a value matching "winconst"
+  # and (optionally) a name that matches "filter_regex"
+  #
+  def select_const_names(winconst, filter_regex=nil)
+    matches = []
 
-		consts.each_pair do |name, value|
-			matches << name if value == winconst
-		end
-		
-		# Filter matches by name if a filter has been provided
-		unless filter_regex.nil?
-			matches.reject! do |name|
-				name !~ filter_regex
-			end
-		end
+    consts.each_pair do |name, value|
+      matches << name if value == winconst
+    end
 
-		return matches
-	end
+    # Filter matches by name if a filter has been provided
+    unless filter_regex.nil?
+      matches.reject! do |name|
+        name !~ filter_regex
+      end
+    end
+
+    return matches
+  end
 end
 
 end; end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/meterpreter/object_aliases'
@@ -8,6 +7,7 @@ require 'rex/post/meterpreter/extensions/stdapi/tlv'
 require 'rex/post/meterpreter/extensions/stdapi/fs/dir'
 require 'rex/post/meterpreter/extensions/stdapi/fs/file'
 require 'rex/post/meterpreter/extensions/stdapi/fs/file_stat'
+require 'rex/post/meterpreter/extensions/stdapi/net/resolve'
 require 'rex/post/meterpreter/extensions/stdapi/net/config'
 require 'rex/post/meterpreter/extensions/stdapi/net/socket'
 require 'rex/post/meterpreter/extensions/stdapi/sys/config'
@@ -34,117 +34,118 @@ module Stdapi
 ###
 class Stdapi < Extension
 
-	#
-	# Initializes an instance of the standard API extension.
-	#
-	def initialize(client)
-		super(client, 'stdapi')
+  #
+  # Initializes an instance of the standard API extension.
+  #
+  def initialize(client)
+    super(client, 'stdapi')
 
-		# Alias the following things on the client object so that they
-		# can be directly referenced
-		client.register_extension_aliases(
-			[
-				{
-					'name' => 'fs',
-					'ext'  => ObjectAliases.new(
-						{
-							'dir'      => self.dir,
-							'file'     => self.file,
-							'filestat' => self.filestat
-						})
-				},
-				{
-					'name' => 'sys',
-					'ext'  => ObjectAliases.new(
-						{
-							'config'   => Sys::Config.new(client),
-							'process'  => self.process,
-							'registry' => self.registry,
-							'eventlog' => self.eventlog,
-							'power'    => self.power
-						})
-				},
-				{
-					'name' => 'net',
-					'ext'  => ObjectAliases.new(
-						{
-							'config'   => Rex::Post::Meterpreter::Extensions::Stdapi::Net::Config.new(client),
-							'socket'   => Rex::Post::Meterpreter::Extensions::Stdapi::Net::Socket.new(client)
-						})
-				},
-				{
-					'name' => 'railgun',
-					'ext'  => Rex::Post::Meterpreter::Extensions::Stdapi::Railgun::Railgun.new(client)
-				},
-				{
-					'name' => 'webcam',
-					'ext'  => Rex::Post::Meterpreter::Extensions::Stdapi::Webcam::Webcam.new(client)
-				},
-				{
-					'name' => 'ui',
-					'ext'  => UI.new(client)
-				}
+    # Alias the following things on the client object so that they
+    # can be directly referenced
+    client.register_extension_aliases(
+      [
+        {
+          'name' => 'fs',
+          'ext'  => ObjectAliases.new(
+            {
+              'dir'      => self.dir,
+              'file'     => self.file,
+              'filestat' => self.filestat
+            })
+        },
+        {
+          'name' => 'sys',
+          'ext'  => ObjectAliases.new(
+            {
+              'config'   => Sys::Config.new(client),
+              'process'  => self.process,
+              'registry' => self.registry,
+              'eventlog' => self.eventlog,
+              'power'    => self.power
+            })
+        },
+        {
+          'name' => 'net',
+          'ext'  => ObjectAliases.new(
+            {
+              'config'   => Rex::Post::Meterpreter::Extensions::Stdapi::Net::Config.new(client),
+              'socket'   => Rex::Post::Meterpreter::Extensions::Stdapi::Net::Socket.new(client),
+              'resolve'  => Rex::Post::Meterpreter::Extensions::Stdapi::Net::Resolve.new(client)
+            })
+        },
+        {
+          'name' => 'railgun',
+          'ext'  => Rex::Post::Meterpreter::Extensions::Stdapi::Railgun::Railgun.new(client)
+        },
+        {
+          'name' => 'webcam',
+          'ext'  => Rex::Post::Meterpreter::Extensions::Stdapi::Webcam::Webcam.new(client)
+        },
+        {
+          'name' => 'ui',
+          'ext'  => UI.new(client)
+        }
 
-			])
-	end
+      ])
+  end
 
-	#
-	# Sets the client instance on a duplicated copy of the supplied class.
-	#
-	def brand(klass)
-		klass = klass.dup
-		klass.client = self.client
-		return klass
-	end
+  #
+  # Sets the client instance on a duplicated copy of the supplied class.
+  #
+  def brand(klass)
+    klass = klass.dup
+    klass.client = self.client
+    return klass
+  end
 
-	#
-	# Returns a copy of the Dir class.
-	#
-	def dir
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::Dir)
-	end
+  #
+  # Returns a copy of the Dir class.
+  #
+  def dir
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::Dir)
+  end
 
-	#
-	# Returns a copy of the File class.
-	#
-	def file
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::File)
-	end
+  #
+  # Returns a copy of the File class.
+  #
+  def file
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::File)
+  end
 
-	#
-	# Returns a copy of the FileStat class.
-	#
-	def filestat
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::FileStat)
-	end
+  #
+  # Returns a copy of the FileStat class.
+  #
+  def filestat
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Fs::FileStat)
+  end
 
-	#
-	# Returns a copy of the Process class.
-	#
-	def process
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Process)
-	end
+  #
+  # Returns a copy of the Process class.
+  #
+  def process
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Process)
+  end
 
-	#
-	# Returns a copy of the Registry class.
-	#
-	def registry
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Registry)
-	end
+  #
+  # Returns a copy of the Registry class.
+  #
+  def registry
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Registry)
+  end
 
-	#
-	# Returns a copy of the EventLog class.
-	#
-	def eventlog
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::EventLog)
-	end
+  #
+  # Returns a copy of the EventLog class.
+  #
+  def eventlog
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::EventLog)
+  end
 
-	#
-	# Returns a copy of the Power class.
-	#
-	def power
-		brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Power)
-	end
+  #
+  # Returns a copy of the Power class.
+  #
+  def power
+    brand(Rex::Post::Meterpreter::Extensions::Stdapi::Sys::Power)
+  end
 end
 
 end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/process'
@@ -21,76 +20,107 @@ module Sys
 ###
 class Config
 
-	def initialize(client)
-		self.client = client
-	end
-
-	#
-	# Returns the username that the remote side is running as.
-	#
-	def getuid
-		request  = Packet.create_request('stdapi_sys_config_getuid')
-		response = client.send_request(request)
-		return client.unicode_filter_encode( response.get_tlv_value(TLV_TYPE_USER_NAME) )
-	end
-
-	#
-	# Returns a hash of information about the remote computer.
-	#
-	def sysinfo
-		request  = Packet.create_request('stdapi_sys_config_sysinfo')
-		response = client.send_request(request)
-
-		{
-			'Computer'        => response.get_tlv_value(TLV_TYPE_COMPUTER_NAME),
-			'OS'              => response.get_tlv_value(TLV_TYPE_OS_NAME),
-			'Architecture'    => response.get_tlv_value(TLV_TYPE_ARCHITECTURE),
-			'System Language' => response.get_tlv_value(TLV_TYPE_LANG_SYSTEM),
-		}
-	end
-
-	#
-	# Calls RevertToSelf on the remote machine.
-	#
-	def revert_to_self
-		client.send_request(Packet.create_request('stdapi_sys_config_rev2self'))
-	end
-
-	#
-	# Steals the primary token from a target process
-	#
-	def steal_token(pid)
-		req = Packet.create_request('stdapi_sys_config_steal_token')
-		req.add_tlv(TLV_TYPE_PID, pid.to_i)
-		res = client.send_request(req)
-		return client.unicode_filter_encode( res.get_tlv_value(TLV_TYPE_USER_NAME) )
-	end
-
-	#
-	# Drops any assumed token
-	#
-	def drop_token
-		req = Packet.create_request('stdapi_sys_config_drop_token')
-		res = client.send_request(req)
-		return client.unicode_filter_encode( res.get_tlv_value(TLV_TYPE_USER_NAME) )
-	end
-
-	#
-	# Enables all possible privileges
-	#
-	def getprivs
-		req = Packet.create_request('stdapi_sys_config_getprivs')
-		ret = []
-		res = client.send_request(req)
-		res.each(TLV_TYPE_PRIVILEGE) do |p|
-			ret << p.value
-		end
-		return ret
-	end
+  def initialize(client)
+    self.client = client
+  end
+
+  #
+  # Returns the username that the remote side is running as.
+  #
+  def getuid
+    request  = Packet.create_request('stdapi_sys_config_getuid')
+    response = client.send_request(request)
+    client.unicode_filter_encode( response.get_tlv_value(TLV_TYPE_USER_NAME) )
+  end
+
+  #
+  # Returns a hash of requested environment variables, along with their values.
+  # If a requested value doesn't exist in the response, then the value wasn't found.
+  #
+  def getenvs(*var_names)
+    request = Packet.create_request('stdapi_sys_config_getenv')
+
+    var_names.each do |v|
+      request.add_tlv(TLV_TYPE_ENV_VARIABLE, v)
+    end
+
+    response = client.send_request(request)
+    result = {}
+
+    response.each(TLV_TYPE_ENV_GROUP) do |env|
+      var_name = env.get_tlv_value(TLV_TYPE_ENV_VARIABLE)
+      var_value = env.get_tlv_value(TLV_TYPE_ENV_VALUE)
+      result[var_name] = var_value
+    end
+
+    result
+  end
+
+  #
+  # Returns the value of a single requested environment variable name
+  #
+  def getenv(var_name)
+    _, value = getenvs(var_name).first
+    value
+  end
+
+  #
+  # Returns a hash of information about the remote computer.
+  #
+  def sysinfo
+    request  = Packet.create_request('stdapi_sys_config_sysinfo')
+    response = client.send_request(request)
+
+    {
+      'Computer'        => response.get_tlv_value(TLV_TYPE_COMPUTER_NAME),
+      'OS'              => response.get_tlv_value(TLV_TYPE_OS_NAME),
+      'Architecture'    => response.get_tlv_value(TLV_TYPE_ARCHITECTURE),
+      'System Language' => response.get_tlv_value(TLV_TYPE_LANG_SYSTEM),
+    }
+  end
+
+  #
+  # Calls RevertToSelf on the remote machine.
+  #
+  def revert_to_self
+    client.send_request(Packet.create_request('stdapi_sys_config_rev2self'))
+  end
+
+  #
+  # Steals the primary token from a target process
+  #
+  def steal_token(pid)
+    req = Packet.create_request('stdapi_sys_config_steal_token')
+    req.add_tlv(TLV_TYPE_PID, pid.to_i)
+    res = client.send_request(req)
+    client.unicode_filter_encode( res.get_tlv_value(TLV_TYPE_USER_NAME) )
+  end
+
+  #
+  # Drops any assumed token
+  #
+  def drop_token
+    req = Packet.create_request('stdapi_sys_config_drop_token')
+    res = client.send_request(req)
+    client.unicode_filter_encode( res.get_tlv_value(TLV_TYPE_USER_NAME) )
+  end
+
+  #
+  # Enables all possible privileges
+  #
+  def getprivs
+    req = Packet.create_request('stdapi_sys_config_getprivs')
+    ret = []
+    res = client.send_request(req)
+    res.each(TLV_TYPE_PRIVILEGE) do |p|
+      ret << p.value
+    end
+    ret
+  end
 
 protected
 
-	attr_accessor :client
+  attr_accessor :client
 
 end